如何使用php存储mysql数据库中的文件和字段数组

时间：2018-03-16 17:55:49

标签： javascript php html mysql

我想知道以下HTML和Javascript中的数组如何存储在Mysql数据库中，每个字段都添加到MYSQL数据库中的以下列：title，category，pdfname（从以下列发送的文件的名称） HTML）和HTML中的文件存储在名为＆＃34; pdffile＆＃34;的目录中。在服务器上对于Javascript添加的每个记录集。

以下是JAVASCRIPT代码：

＆＃13;
＆＃13; 
<SCRIPT language="javascript">
function addRow(tableID) {
	var table = document.getElementById(tableID);
	var rowCount = table.rows.length;
	if(rowCount < 10){                            // limit the user from creating fields more than your limits
		var row = table.insertRow(rowCount);
		var colCount = table.rows[0].cells.length;
		for(var i=0; i <colCount; i++) {
			var newcell = row.insertCell(i);
			newcell.innerHTML = table.rows[0].cells[i].innerHTML;
		}
	}else{
		 alert("Maximum Number of Books is 10");
			   
	}
}

function deleteRow(tableID) {
	var table = document.getElementById(tableID);
	var rowCount = table.rows.length;
	for(var i=0; i<rowCount; i++) {
		var row = table.rows[i];
		var chkbox = row.cells[0].childNodes[0];
		if(null != chkbox && true == chkbox.checked) {
			if(rowCount <= 1) {               // limit the user from removing all the fields
				alert("Cannot Remove all the Books.");
				break;
			}
			table.deleteRow(i);
			rowCount--;
			i--;
		}
	}
}
</SCRIPT>
＆＃13; 
</HEAD>
    <div style="border:auto solid 1px; font-size:15px; background-color:red; width:100%;">
    <form action="" enctype="multipart/form-data" id="pdf_form" method="post" name="pdf_form">

    	
      <table id="dataTable" class="form" border="1">
      <tbody>
    	<p>
    	<td >
    		<input type="checkbox" name="chk[]" checked="checked" />
    	</td>
    	<td>
    	<label for="title">Title of PDF</label>
    	<input type="text" id="title" name="title[]">

    	
    	<td>
    	<label for="pdffile">PDF supported. 2MB Maximum)</label>
    	<input type="file" id="pdffile" name="pdffile[]">
    	
    	</td>
    	
    	<td>
    	<label for="category">Category</label>
    	<select id="category" name="category[]"> 
        <option>Science</option>
        <option>Technology</option>
        <option>Biblical</option>
        <option>Business</option>
        <option>Medical</option>
        <option>Engineering</option>
        <option>World</option>
    	</select>
    	</td>
    	
    	</p>
      </tr>
     </tbody>
    </table>


    <p> 
      <input type="button" value="Add PDF" onClick="addRow('dataTable')" /> 
      <input id="button" name="submit" type="submit" value="Save PDF(s)" />
      
      <p>(All actions apply only to entries with check marked check boxes only.)</p>
    </p>
    </form>
    </div>

    //PHP for Upload

    <?php
error_reporting(E_ALL);
   include("session.php");
   session_start();
   
   if($_SERVER["REQUEST_METHOD"] == "POST") { 
      
  	$pdffile = $_FILES['pdffile']['name'];
  	$pdffile_name = $_POST['pdffile'];
  	// Get text
  	$pdffile_name = mysqli_real_escape_string($con, $_POST['pdffile_name']);

  	// image file directory
  	$target = "books/".basename($pdfstore);  
      
$item_title = $_POST['title'];
$item_category = $_POST['category'];
$item_pdfname_name = $_POST['pdfname_name'];

foreach ($_FILES as $pdfname)

  if (move_uploaded_files($pdffile['tmp_name'], 'pdfstorage/' . $file['pdffile']))

for($count = 0; $count<count($item_title); $count++){

  $title = mysqli_real_escape_string($con,$item_title[$count]);
  $category = mysqli_real_escape_string($con,$item_category[$count]);
  $pdfname = mysqli_real_escape_string($con, $item_pdfname[$count]);
  
 {
    


  $sql = "INSERT INTO pdftable (title, category, pdfname) VALUES('$title', '$category', '$pdfname')";
}
if (move_uploaded_file($_FILES['pdffile']['tmp_name'], $target));

  if ($con->query($sql) === TRUE) {
    echo "<div style='border:auto solid 1px; font-size:15px; color:green; background-color:auto; width:100%;'> PDF with Title $title Added Successfully. </div>";
  }
  else {
    echo "Error: " . $sql . "<br>" . $con->error;
  };
};
};
?>
＆＃13;
＆＃13;
＆＃13;

每次，字段＆＃34;类别[]＆＃34;和＆＃34;标题[]＆＃34;被添加到数据库中，但是，文件不会被移动到＆＃34; pdfstorage＆＃34;服务器上的文件夹和文件名未添加到数据库中。我需要MYSQL代码才能成功地将文件和字段添加到数据库中。将不胜感激。

感谢。

1 个答案:

答案 0 :(得分：0)

这是一些有效的PHP代码。请注意，您的代码存在很多安全问题。使用原始的$ _POST数据，不验证用户输入，过滤用户输入...参见预备语句和绑定w / mysqli。例如，您需要确保PDF确实是PDF文件。

以下是文件上传部分的一些工作代码。我注释掉了数据库查询和转义字符串调用。我不想设置数据库。我正在使用上传目录（$ target）“html”vs book / ...进行测试。我删除了包含的session.php调用，因为我不想创建该文件。有几个地方你想调整我的代码。我也打开了display_errors。希望这可以帮助。我的html也没有缩进，因为我正在争先恐后地向你提供一些东西。我也删除了一些不需要的分号。

<html>
<head>
    <SCRIPT language="javascript">
function addRow(tableID) {
    var table = document.getElementById(tableID);
    var rowCount = table.rows.length;
    if(rowCount < 10){                            // limit the user from creating fields more than your limits
        var row = table.insertRow(rowCount);
        var colCount = table.rows[0].cells.length;
        for(var i=0; i <colCount; i++) {
            var newcell = row.insertCell(i);
            newcell.innerHTML = table.rows[0].cells[i].innerHTML;
        }
    }else{
         alert("Maximum Number of Books is 10");
    }
}

function deleteRow(tableID) {
    var table = document.getElementById(tableID);
    var rowCount = table.rows.length;
    for(var i=0; i<rowCount; i++) {
        var row = table.rows[i];
        var chkbox = row.cells[0].childNodes[0];
        if(null != chkbox && true == chkbox.checked) {
            if(rowCount <= 1) {               // limit the user from removing all the fields
                alert("Cannot Remove all the Books.");
                break;
            }
            table.deleteRow(i);
            rowCount--;
            i--;
        }
    }
}
</SCRIPT>
</head>
<body>
    <div style="border:auto solid 1px; font-size:15px; background-color:red; width:100%;">
    <form action="./test.php" enctype="multipart/form-data" id="pdf_form" method="post" name="pdf_form">


      <table id="dataTable" class="form" border="1">
      <tbody>
        <p>
        <td >
            <input type="checkbox" name="chk[]" checked="checked" />
        </td>
        <td>
        <label for="title">Title of PDF</label>
        <input type="text" id="title" name="title[]">


        <td>
        <label for="pdffile">PDF supported. 2MB Maximum)</label>
        <input type="file" id="pdffile" name="pdffile[]">

        </td>

        <td>
        <label for="category">Category</label>
        <select id="category" name="category[]">
        <option value="Science">Science</option>
        <option value="Technology">Technology</option>
        </select>
        </td>

        </p>
      </tr>
     </tbody>
    </table>
    <p>
      <input type="button" value="Add PDF" onClick="addRow('dataTable')" />
      <input id="button" name="submit" type="submit" value="Save PDF(s)" />

      <p>(All actions apply only to entries with check marked check boxes only.)</p>
    </p>
    </form>
    </div>
</td>
</p>
</tbody>
</table>
</form>
</div>
</body>
</html>

<?php
ini_set('display_errors', 'On');
error_reporting(E_ALL);

session_start();

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // image file directory
    $target = __DIR__."/html/";

    foreach ($_FILES as $pdfname) {
        for ($count = 0; $count < count($_FILES['pdffile']['tmp_name']); $count++) {
            $item_title = $_POST['title'][$count];
            $item_category = $_POST['category'][$count];
            $pdffile = $_FILES['pdffile']['name'][$count];

            if (move_uploaded_file($_FILES['pdffile']['tmp_name'][$count], $target.$pdffile)) {
                // Whatever you were going to do here....
            }

            //$sql = "INSERT INTO pdftable (title, category, pdfname) VALUES('$title', '$category', '$pdfname')";
            //$title = mysqli_real_escape_string($con, $item_title);
            //$category = mysqli_real_escape_string($con, $item_category);
            //$pdfname = mysqli_real_escape_string($con, $pdffile);
            //$pdffile_name = mysqli_real_escape_string($con, $_POST['title'][$count]);


            /**if ($con->query($sql) === true) {
                echo "<div style='border:auto solid 1px; font-size:15px; color:green; background-color:auto; width:100%;'> PDF with Title $title Added Successfully. </div>";
            } else {
                echo "Error: " . $sql . "<br>" . $con->error;
            };**/
        }
    }
}
相关问题
最新问题